41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement the BitSkins API as described, but there are clear incoherences (missing declared credentials and binaries, unknown source) that you should resolve before trusting it wi...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770566674755,
        "_id": "k973dsr6q2m7yhy63ysyyept2580rec8",
        "changelog": "Initial release of BitSkins API skill.\n\n- Enables interaction with BitSkins REST and WebSocket APIs for CS2\/Dota 2 skin trading.\n- Supports user authentication, account management, searching the market, buying\/selling items, and managing deposits\/withdrawals.\n- Includes wallet operations, KYC, transaction history, and reports.\n- Provides Steam inventory integration and real-time marketplace updates via WebSocket.\n- Requires a BitSkins API key (via environment variable) and 2FA codes for sensitive actions.\n- Includes clear examples and guidelines for using each core API endpoint.",
        "changelogSource": "user",
        "createdAt": 1770566674755,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "bluesyparty-src",
        "handle": "bluesyparty-src",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/258582047?v=4",
        "kind": "user",
        "linkedUserId": "kn72x6yv17z03qwby778990nfx80dmgn"
    },
    "ownerHandle": "bluesyparty-src",
    "skill": {
        "_creationTime": 1770566674755,
        "_id": "kd7e36dmh5drd7r6sjaa45kdan80rq2z",
        "badges": [],
        "createdAt": 1770566674755,
        "displayName": "BitSkins",
        "latestVersionId": "k973dsr6q2m7yhy63ysyyept2580rec8",
        "ownerUserId": "kn72x6yv17z03qwby778990nfx80dmgn",
        "slug": "bitskins",
        "stats": {
            "comments": 0,
            "downloads": 881,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Interacts with the BitSkins REST API V2 and WebSocket API for CS2\/Dota 2 skin trading. Supports account management, market search, buying, selling, listing, delisting, relisting, price updates, Steam inventory\/deposits\/trades, wallet operations, and real-time WebSocket subscriptions. Use when the user wants to search for skins, check prices, buy or sell items, manage their BitSkins account, check balances, or interact with the BitSkins marketplace.",
        "tags": {
            "latest": "k973dsr6q2m7yhy63ysyyept2580rec8"
        },
        "updatedAt": 1774323357097
    }
}